Active Directory Services with Windows Server 2019/2025

The training is addressed to:

• For IT professionals and identity administrators. This training is for people who are responsible for managing Active Directory infrastructure on Windows Server systems. Designed for professionals who want to acquire the skills needed to better manage and protect access to data and information, simplify the deployment and management of identity infrastructure, and ensure more secure data access, including configuring key Active Directory features, such as:

• Active Directory Domain Services (AD DS),

• Group Policy,

• Dynamic Access Control (DAC),

• Certificate Services,

Equivalent to the retired MS 10969 training – Active Directory Services with Windows Server.

In particular, the course is intended for:

Information technology (IT) professionals who have basic experience with Active Directory Domain Services (AD DS) and are looking for a single course that will further develop their knowledge and skills using information access and protection technologies in Windows Server. AD DS administrators who want to further develop their skills in the latest access and information protection technologies in Windows Server, system or infrastructure administrators with general experience and knowledge of AD DS who want to build on this foundational knowledge and move to advanced Active Directory technologies in Windows Server.

• Rights Management Services (RMS),

• Federation Services (optional)

• and integration of the on-premises environment with cloud-based technologies such as Microsoft Entra ID.

Gaining knowledge and practical skills in managing Active Directory Domain Services in Windows Server.

This includes getting acquainted with:

• Available identity management solutions.
• Deploying and administering AD DS on Windows Server.
• Securely deploying AD DS.
• Deploying and configuring AD DS sites and managing replication.
• Implementing and managing Group Policy.
• Managing user settings using Group Policy.
• Securing and ensuring access to data using technologies such as dynamic access control.
• Monitoring, troubleshooting, and ensuring business continuity of AD DS services.
• Implementing a certification authority hierarchy using AD CS and how to manage certification authorities.
• Deploying and managing AD RMS.
• Deploying and managing AD FS (optional)
• Microsoft Entry ID service fundamentals.

This course provides participants with the knowledge and skills to use Active Directory.

It is a counterpart to the discontinued MS 10969 – Active Directory Services with Windows Server course

1. 1: Introduction to AD DS in Windows Server

   Active Directory Overview

   What's New in Windows Server?

   What's New in Active Directory?

   AD DS Logical Architecture

   AD DS Physical Architecture

   AD DS Operations

   2: Installing AD DS on Windows Server

   Deploying AD DS

   FSMO Master Operations

   Deploying and Cloning Virtual Domain Controllers

   Deploying Domain Controllers in Azure and Synchronizing with Entra ID

   3: Administering AD DS

   Graphical Administration Consoles

   Command Line Tools

   Managing Objects with Powershell

   Common Administration Tasks

   4: AD DS Replication

   Overview of AD DS Replication

   Configuring AD DS Sites

   5: AD DS Security

   Domain Controller Security

   6: AD DS Monitoring and Recovery

   Monitoring AD DS

   Managing the AD DS Database

   AD DS Backup and Recovery Options

   7: Implementing GPO policies

   Introduction to Group Policy

   Implementing and Administering Group Policy Objects

   Troubleshooting Group Policy Object Applications

   8: Configuring the environment using Group Policy

   Administrative Templates

   Configuring Folder Redirection and Scripts

   Software Installation

   Configuring Group Policy Preferences

   9: Dynamic Access Control Configuration

   Implementing DAC Components

   Configuring DAC

   Implementing Access Denial Assistance

   10: Deploying and Managing AD CS

   Deploying the AD CS Role

   Administering Certification Authorities

   Managing Certificate Templates

   Using Certificates in a Business Environment

   11: Deploying and managing AD RMS

   AD RMS Overview

   Deploying and Managing AD RMS Infrastructure

   Configuring AD RMS Content Protection

   12: Deploying and managing AD FS (optional)

   AD FS Overview

   AD FS Deployment

   13: Microsoft Entra ID

   Microsoft Entra ID Overview

   Managing Microsoft Entra ID Accounts

   Syncing AD DS Accounts with Microsoft Entra ID

• Participants should have at least two years or more experience in the IT field.

• It is recommended to attend courses on Windows Server 2012, 2016, 2019, 2022, 2025 or equivalent knowledge.

• Solid, practical understanding of networking fundamentals, including TCP/IP.

• Solid, practical understanding of Microsoft Hyper-V virtualization fundamentals, understanding of Windows Server security principles.

• Ability to use PowerShell commands (previous participation in PowerShell Fundamentals training is welcome)

• To make your work more convenient and training more effective, we suggest using an additional screen. Lack of such screen does not exclude participation in the training, however it significantly influences working comfort during classes.

• You can find information and requirements of participation in Distance Learning trainings at:

 http://(https://www.altkomakademia.pl/distance-learning/#FAQ

•  manual in electronic form available on the platform: https://www.altkomakademia.pl/

• access to Altkom Akademia's student portal

The training includes:

• access to the Altkom Akademia student portal

• training conducted in the form of a presentation

• trainer demonstrations

• practical exercises (laboratories)

• Training: English
• Materials: English